1. Overview
This notice gives you a transparent, per-feature view of our data practices. It does not replace the Privacy Policy — it supplements it. Where this notice and the Privacy Policy differ, the Privacy Policy prevails.
2. What we collect at each touchpoint
| Touchpoint | Data fields | Purpose | Retention |
|---|---|---|---|
| Contact / enquiry form | Name, email, phone, message, service of interest | Respond to your enquiry and follow up | 24 months |
| Consultation booking | Name, contact, preferred date, destination country, service type | Schedule and confirm the consultation | 24 months |
| Client portal sign-up | Email, password (hashed), name, phone, preferred language | Create your account and authenticate access | Until you delete the account or 5 years inactive |
| Document upload | Passport, NID, photos, certificates, bank statements, employment letters, supporting documents | Prepare and submit your visa / recruitment / attestation file | Case duration + 3 years |
| AI assistant chat | Your messages and assistant replies, language preference, anonymised session ID | Provide instant answers and improve the assistant | 12 months |
| Application tracking | Application reference, status events, advisor notes | Show you progress milestones | Case duration + 3 years |
| Payment | Transaction reference, payment channel, amount, payer mobile/account | Reconcile payments, issue receipts, comply with NBR record-keeping | 7 years (statutory) |
| Cookies & analytics | Session cookie, language cookie, IP, browser/device info, pages visited | Keep you logged in, remember language, measure traffic | 12 months |
| Email & WhatsApp communications | Message content, timestamps, sender/recipient | Maintain a record of advisory communications | Case duration + 3 years |
4. Third-party processors we use
| Processor | Function | Data accessed |
|---|---|---|
| Managed cloud database & storage | Hosts our website, client portal, and document vault | All operational data |
| AI gateway provider | Powers the AI assistant | Chat messages and responses |
| Transactional email service | Sends account, case, and payment notifications | Email address, name, message metadata |
| Flight & hotel search providers | Optional travel search on our website | Search parameters only |
| Payment partners (bKash, Nagad, banks) | Process payment instructions | Transaction reference and amount |
Each processor handles data on our written instructions, under a confidentiality undertaking, and only for the purpose described above.
5. Consent & choices
- Marketing emails — opt-in at sign-up; unsubscribe in any email footer or by emailing us.
- AI assistant — using the assistant is optional; you can contact a human advisor at any time.
- Optional document fields — fields marked optional may be left blank without affecting eligibility for our service.
- Withdraw consent — for any processing based on consent, email us; withdrawal does not affect lawful processing already carried out.
6. Automated decision-making
We do not make decisions that have a legal or similarly significant effect on you on the basis of automated processing alone. The AI assistant provides informational answers only; eligibility assessments and case decisions are reviewed by a human advisor.
7. Your rights
You have the rights described in section 9 of our Privacy Policy — access, correction, deletion, portability, withdrawal of consent, and complaint. To exercise them, email [email protected] with the subject "Privacy request".
8. Contact
Data queries: TravelZone BD, 40/7, Moushumi R/A, Kumarpara, Sylhet — [email protected] — +880 1711-236484.
A note on this document
This policy has been prepared in good faith and reflects current Bangladeshi law and standard consultancy practice as of 30 May 2026. It does not constitute legal advice. For specific questions about your case, please consult a licensed Bangladeshi advocate or contact us at [email protected].